Application. No.: 10/566,206 
Amendment dated January 25, 2008 
Reply to Office Action of October 25, 2007 



Listing of Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 

Claim 1 : (Currently Amended) A method of authentication for Media Gateway, 
characterized in that the method comprises: 

S6^t;m-g-ii|>-aa4m^kl-feey-fef providing each of 
Corslrolier with an irsitial key to-val-kkimg validate i attM-digital signatures-%etwea?-a~Metfe 

each of s aid Media Gateway and said Media Gateway Controller generating a shared key 

Controller using said initial key; 




said Media (jateway C'ontroller and said Media C^atesvay authenticating each message 

betwee n the Media Gateway Controller and the Media Gateway by using the shared key; and 



g§:M.M:gjii^.QMg:>ygXJ^^.^Md.M said shared key 

fe et w «e n - 6ai4Aledi« -- Gftte w fty --aayi-f>a M"Modia Gat ew ay ContmU e i-i ^ wheG the lifetime of said 
shared key is expired. 

Claim 2: (Currently Amended) The method according to claim 1 , characterized in that the 
step of each of said Media (jateway and said M.edia (jateway C'ontroller g enerating a-H^wdie 
shared key fe?4feteM;omprises: 

t he Jv&djiLtMewiXl ^ register signaling irisssageJkH^v-saM 

€st5tev%«y to said Media Gateway Controller-4e-pegiSte^, wherein said register signaling messfigS 
iB£kKiesfe*s a parameter for said .Me.dia.Gatew^^^^ shared 
key and ^an initial digital signature generated by the Media Gateway using said initial key; 
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said Media Gateway Controller validating the mitiai digital signature generated by the 

said Media Gateway Controller g enerating a -the s hared key based on the parameter in 
said register signaling message and setting «^a lifetime of said shared key when the initial 
digital signature generated by said Media Ciateway is validated- ^ 
geHti-oH-er-has-vdidatedsaid-Media-Gateway-w 

MMMedia Gatew a modification command 

MiHii-a--Strtewsy--GeMrelk¥-to said Media Gateway, wherein said modification command feas 
mchKle8.a parameter for Siiid^Media Gatewa^^ the shared key, a digital 

signature generated by said Media Gateway C'ontrolier using said initial key, and a the lifetime of 
^said.shared key; 

said M.edia (jateway validating the digital signature generated by said Media (gateway 

Controller by using said in itial key; and 

said Media Gateway generating the shared key ba sed on the p arameter in said 
mMi the lifetime^jvhaithMigilM Jm?llAlie 

g^uenited.by.said.Med 



Claim 3 : (Currently Amended) The method according to claim 1 , characterized in that the 

step of smdJVIedia Gj^tfewa^^^^ 
messageaH4.fe.eati-6«ti-i>g feFl-lH?*--comprises: 

for each call, said Media Gateway Comrolier attaching a digital signature generated by 
the Media Galgway C^ontroljer using said sb aredkey t o eaeh-a^call message -frem ^iaid-M^dia 
G^mHW-Gemmii^ transinilted to said Media Gateway■■by■UrsiHg■■said■shar■&d■k^ey; 

Mid.MMi.^..ti^tewaj validating said digital signature i»-attached.to said call message4st 
«5id-Medis-€atewa¥ by using said shared key^ and tf-i^-i^-va^fdy-retuming a response message 
attached with a digital signature Hsisg-ii^iMgenerated. byih shared 
key to said Media Gateway Controller when said digital signature in said ca j j message is 
validated ; and 
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MliMMiiiSatew^wXi?^^ said digital signature M^idlMlowi said 

response message ifriiai4-Mddia--Gatewi4Y4^ using said shared key-tf 44--»--v^5Mt 

^■te j#g"U:^ >estabiish m g a call connectiomefyiee when, said digital sigaature attached to said 
response message is vahd, otherwise denying the call. 



Claim 4: (Currently Amended) The method according to claim 1, characterized in that the 

step of said Media Cjatewa^^ Comroiser updating said shared key ft«tfee5= 

comprises: 

sending a notification command ft^H^r-lrs^ said Media Gateway to said Media Gateway 
Controller-; to requestiag said Media Gateway Controller to generate a new shared key, wherein 
said notification command feai ^ind udes. a parameter for said lvlcdia GMcwa^^^^ 
geaemfe f generate a -ihe nesv shared key and a digital signature generated by said Media 
Gateway using ia^ethe initial key; 

said Media Gateway (Controller validating the digital signature generated by said Media 
Gateway using said initial key; 

Sf^jd.Media Gatewax.C^n^ it-ihc new shared key based.on.ihc.pai^^ 

in said notification command and setting up-a lifetime of said new shared key. afe^^fa^^l~Me^lia 
Gate¥»H^ y €eBl - t = eM6^ - haS"Val i dal^'4 wh^ said Media Gateway 

w4fe^»ai4i-Hi-tial-k^ yis validated ; 

sfj:id.Media .GMewfffl:. C a modification command from sa M 

Med-Hs-Gateway- t^ffi^reikf-to said Media Gateway, wherein said e^edify modm^ 
bas -includes a parameter for said Media Gateway to g ®B;©^=aria ^geaerate the new shared key, a 
digital signature generated by said Media (.iateway (Coniroller using said i nitial key and the 
lifetime of the new shared key; 

.sfdd.MMi.^..Q.Mewaj..valM 

Controiier by using said initial key; and 

??aid M^dia:ij^^:!;vway..generating the new shared key based o«.the.|)amm€te 
modjficalionjx^^ setting yp- the lifetime,,jA4]enjbe_^^ 
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Claim 5: (Original) The method according to claim 2, 3 or 4, characterized in that the 
algorithm used to generate a shared key by said Media Gateway Controller and said Media 
Gateway is different from the algorithm used to generate a digital signature by said Media 
Gateway Controller and said Media Gateway. 

Claim 6: (Original) The method according to claim 2, 3 or 4, characterized in that a 
field/packet of an expanded protocol is used to transmit said parameter for generating a shared 
key and said digital signature. 

Claim 7: (Currently Amended) The method according to claim 1, characterized in that the 
lifetime of said shared key is time, or the number of times tliat said shared key can be used for 
authentication. 
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